SCS-C01 Web TestEngine Demo

Q86 Single choice

A large corporation is creating a multi-account strategy and needs to determine how its employees should access the AWS infrastructure.

Which of the following solutions would provide the MOST scalable solution?

A
Create dedicated IAM users within each AWS account that employees can assume through federation based upon group membership in their existing identity provider
B
Use a centralized account with IAM roles that employees can assume through federation with their existing identity provider Use cross-account roles to allow the federated users to assume their target role in the resource accounts.
C
Configure the AWS Security Token Service to use Kerberos tokens so that users can use their existing corporate user names and passwords to access AWS resources directly
D
Configure the IAM trust policies within each account's role to set up a trust back to the corporation's existing identity provider allowing users to assume the role based off their SAML token

SCS-C01 Web TestEngine demo